Zomato assures customer data is safe, contacts hacker to 'destroy' stolen info

Zomato's rotten security sees hackers make off with 6.6 million user passwords

The company had reported yesterday that about 17 million user records have been stolen from its database, which included user email addresses and "hashed" passwords but no payment information or credit card data.

The number was revealed on the Zomato blog itself, which states that the hackers were able to get the e-mail addresses and passwords of these users. The company said it will be actively working to plug any more security gaps in its systems. Meanwhile, the cyber security experts say that the hacker might not only mis-utilize the data but can also blackmail the users.

"The "ethical hacker" - whose identity has been kept under wraps - simply wanted to expose the security vulnerabilities in the company's structure", read the blog post. The data which was being sold on the Dark Web has now been taken down after an agreement between the company and the hacker (s).

Either way, Zomato's data breach of 6.6 million users is pretty big.

Zomato claims that the hacker gave them all the details about gaining access to the database, and that they will post the information on their blog once the loopholes are closed, so that others can learn from their mistakes. The hacker has also since taken down the listing it posted online, where he/she said he/she was willing to sell the data.

"Access token leakage is much more severe as I could have seen private photos of all Zomato users who have connected their Instagram account using Instagram API", Prakash added. Bug bounties are a standard program among tech companies, where they reward outsiders to highlight bugs and flaws in their software systems.

According to Zomato‚ the person behind the hack came forward and told them exactly how they did it‚ and agreed to delete the data in exchange for the company setting up a bounty programme for security researchers.

Zomato said over 120 million users visit its site every month. "When Zomato users trust us with their personal information, they naturally expect the information to be safeguarded". Zomato's admission that it used a simple encryption method for user account passwords is worrying. This put users at risk since the encrypted passwords stored on Zomato's database can be converted into readable formats easily. Important update on the security breach - https://t.co/9mqwoOYY8F - leaked data removed from marketplace, continuing corrective steps.

Related news:

Hot News

isis-killer-beheading-video-story-top MLB Predictions: Can the Tigers stop the Rangers' win streak? 5/20/17
May 22, 2017 - 08:03
In Atlanta, Nick Markakis hit a go-ahead single off Enny Romero (2-2) in the eighth inning and Kurt Suzuki added a two-run homer. Nick Martinez lasted just five innings for the Rangers, but he didn't allow an earned run and allowed Texas to get the lead.

isis-killer-beheading-video-story-top Destiny 2 Deeply Detailed, Coming to PC
May 21, 2017 - 07:35
Also new is Clan support offering features such as in-game rosters and custom banners. As well as new game modes, numerous landscapes within Destiny are new as well.

isis-killer-beheading-video-story-top Wenger's future at Arsenal will be decided after FA Cup final
May 21, 2017 - 07:34
Arsenal last failed to be part of European football's premier competition in the 1996/97 season and go into the final game sitting outside the top four places.

isis-killer-beheading-video-story-top NASCAR's Regan Smith replaces injured Almirola in Charlotte
May 21, 2017 - 07:24
They didn't know if I was paralyzed. "I've learned I have a hell of a polo shirt collection at this point", Smith said Friday. Almirola was actually almost two seconds behind the initial incident between Danica Patrick and Joey Logano.

isis-killer-beheading-video-story-top Watch the moment teenage Mark Zuckerberg got accepted to Harvard
May 21, 2017 - 07:04
Zuckerberg, who left Harvard his sophomore year, will be receiving an honorary Doctor of Letters degree. In the video, we see a young Zuckerberg hanging out in his room while his dad Edward films him.

Ransomware cyber-attack a wake-up call
May 20, 2017 - 05:21
Also hit were Deutsche Bahn, the Russian Central Bank , Russian Railways, Russia's Interior Ministry, Megafon and Telefónica. WannaCry uses a vulnerability in old versions of Windows that was originally discovered and exploited by the U.S.

isis-killer-beheading-video-story-top It's not luck: Celtics earn top pick in National Basketball Association draft
May 20, 2017 - 05:09
It sounds like the organization is split on what to do leading up to the 2017 NBA Draft on June 22 . Charlotte is No. 11, with Detroit, Denver and Miami rounding out the 14 lottery spots.

isis-killer-beheading-video-story-top Man United held by Southampton in 0-0 stalemate
May 20, 2017 - 04:58
There will be some changes to the team but my team want to play at Old Trafford, they don't want me to leave them out. Southampton struggled to relieve the pressure building on manager Claude Puel against an under-strength United.

isis-killer-beheading-video-story-top Deepika padukone at cannes red carpet
May 19, 2017 - 04:51
The Padmavati actor took everyone's breath away with her maroon cocktail gown, and on Day 2, she seems to be having fun in Cannes. Interestingly, Deepika's Day 1 red carpet appearance was quite impressive, and the global media is now hopefully impressed.

Trump campaign had at least 18 undisclosed contacts with Russian Federation
May 19, 2017 - 04:46
In a sign that the controversy over Russian Federation had reached a new phase, several White House officials were said to have... Congressional investigators are seeking Comey's memos, as well as documents from the Justice Department related to the firing.

isis-killer-beheading-video-story-top Have an exploding airbag? You might get $500
May 19, 2017 - 04:44
In January, the company pleaded guilty to corporate criminal charges and agreed to pay a $1 billion fine. Owners getting a recall can be reimbursed for lost wages, transportation and child care costs.

isis-killer-beheading-video-story-top Judiciary senators want White House, FBI memos
May 19, 2017 - 04:38
Some Trump critics say the conversation with Comey was tantamount to obstruction of the FBI's investigation. Members of the Senate Judiciary Committee also planned to ask Comey to testify, The Hill reported .

isis-killer-beheading-video-story-top NY police officer shot, suspect found dead after barricade situation
May 19, 2017 - 04:35
Amthor, who is also police chief of the neighboring town Montgomery, is expected to be OK and is being treated at a hospital. While speaking with the suspect, there was an exchange of gunfire, and the officer was hit in the shoulder, Tripodo said.

isis-killer-beheading-video-story-top School bus flips in hit-run; 14 students taken to hospital
May 19, 2017 - 04:33
All patients at Lancaster General Hospital have been released, Lines said. A hospital spokesperson said three students sustained traumatic injuries.

isis-killer-beheading-video-story-top James scores 35, Cavs take 3-0 lead with 115-94 victory
May 18, 2017 - 20:29
James hit a 3-pointer to improve the lead to 15, and he made two more foul shots with 6:21 left to push the lead to 17. LeBron James' sensational form in the NBA Playoffs has continued with a 35-point haul against Toronto on Friday night.